
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/138c19e2-b5a7-3a1e-bb92-0bf4276f9543.roa
File: 138c19e2-b5a7-3a1e-bb92-0bf4276f9543.roa (raw, json)
Hash identifier: 6DGH4bPP8j82jdStxZrx6L+kOGJhL3Fz6WtVfm2k5jg=
Subject key identifier: 8A:45:23:C2:04:BC:26:15:E9:3C:3A:3E:21:05:D5:0B:F3:3A:F1:EC
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D27AA8549B6DB4A6229940180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/138c19e2-b5a7-3a1e-bb92-0bf4276f9543.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 396982
IP address blocks: 34.17.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:85:49:b6:db:4a:62:29:94:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=7c9743ef-969f-4b6b-8b2d-30c9badc08ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bc:43:4c:b3:7a:73:8d:20:7a:27:28:6a:71:
64:7b:22:24:3e:3b:e3:d3:0d:48:74:dc:93:c3:d6:
89:35:61:3a:3b:7f:19:90:09:e2:e7:a5:61:e6:b6:
35:26:78:90:03:d6:80:67:d2:91:eb:5f:e4:d6:cc:
1b:0d:31:ab:61:aa:f6:1f:03:e6:59:3a:c9:a3:9b:
ef:b5:03:4f:98:28:5b:f8:1d:6b:ba:f6:61:8f:b5:
a7:c1:5c:62:26:d8:a6:20:1b:46:62:9a:4c:0c:e7:
cd:8c:cc:74:15:3d:05:12:29:d3:52:db:a1:d1:c0:
ad:90:ba:a9:94:80:c8:55:5a:57:79:88:70:3f:db:
7e:d3:bb:eb:52:df:62:60:f8:cd:a0:52:a2:da:fa:
7b:dc:ac:06:99:59:78:a4:d9:40:c2:9e:72:11:0b:
43:bf:3f:26:2d:80:06:7c:28:d1:93:e8:14:78:05:
c7:ff:b7:bf:64:41:14:2d:8c:32:9c:f1:7d:a1:d9:
9b:f2:97:5a:33:d1:05:24:99:28:5e:c1:e1:02:85:
2f:2a:37:63:b1:c7:f5:3a:28:1f:63:12:b1:f6:4d:
c3:10:20:50:6b:66:a0:26:c0:47:5c:0d:aa:b4:f6:
20:86:78:fb:c9:6e:07:be:0d:05:23:78:7d:0a:37:
ab:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:45:23:C2:04:BC:26:15:E9:3C:3A:3E:21:05:D5:0B:F3:3A:F1:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/138c19e2-b5a7-3a1e-bb92-0bf4276f9543.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.17.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:69:eb:de:78:9f:da:11:40:40:99:7c:02:27:e2:ed:e6:57:
49:93:14:19:4d:23:bb:5c:a6:f1:2b:4b:72:71:67:db:32:2f:
48:0f:bc:a9:0c:30:72:2c:b7:dd:ac:05:fe:90:7e:d5:9d:42:
cc:30:ed:c9:86:59:10:0b:02:86:c5:11:4b:70:18:11:ec:2e:
18:13:d4:02:0e:0a:3a:cc:b4:4e:f7:78:17:7a:2b:fa:fc:52:
a9:70:0f:de:69:b1:87:cc:8b:e9:f0:4a:4f:76:dc:0b:35:8e:
56:7d:82:b6:00:c7:4f:ca:f7:a9:fb:b9:57:d8:2d:6b:16:25:
1d:62:f0:3d:bf:c4:94:1b:18:8b:58:9a:02:e9:3b:11:b2:44:
39:41:cd:30:7b:a8:85:31:12:19:66:e9:07:04:12:aa:19:f0:
59:ce:6f:8c:2f:b1:7a:5d:a1:91:41:62:c4:ea:89:49:1b:0f:
94:f9:49:66:dc:6b:29:a1:5c:9b:6e:ac:5a:e9:e8:5f:1d:e0:
a3:61:2a:fb:74:72:ff:12:cc:14:fb:56:32:84:dc:9a:6a:8b:
80:63:ba:87:a3:2d:02:68:02:44:5c:8c:b9:1a:da:7a:cc:bb:
bd:55:72:6f:77:4c:42:21:34:83:29:e4:f7:fc:26:f2:4e:df:
60:11:20:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:48:38 2026 by rpki-client